@yemi33/minions 0.1.2240 → 0.1.2241

package/dashboard.js

@@ -14178,6 +14178,14 @@ if (require.main === module) {
   // engine reads, port binding) is captured rather than dying silently.
   _installCrashHandlers();
 
+  // Every copilot the dashboard spawns — Command Center, doc-chat, and the CC
+  // worker pool (`copilot --acp`) — inherits this process's COPILOT_HOME. Point
+  // it at the seeded, MCP-filtered home so those `direct:true` copilot calls
+  // load the filtered config instead of the operator's full `~/.copilot` stack
+  // (which would pop a Microsoft auth window per call). Mirrors the engine's
+  // boot-time set. See shared.ensureAgentCopilotHome. Fail-open.
+  try { process.env.COPILOT_HOME = shared.ensureAgentCopilotHome(MINIONS_DIR, CONFIG?.engine); } catch {}
+
   // Pre-warm the per-project git-status cache before accepting requests so
   // the first /api/status after restart already returns gitState='ok' with a
   // real branch instead of the ~8s pending gap that hides the projects-bar

package/engine/shared.js

@@ -5666,6 +5666,40 @@ function resolveAgentCopilotHome(minionsDir) {
   return path.join(base, '.minions-agent-copilot-home');
 }
 
+// Seed the agent COPILOT_HOME's mcp-config (copy of `~/.copilot/mcp-config.json`
+// MINUS `engine.copilotAgentDisabledMcpServers`) and return the home path. This
+// is the single source of truth for "what MCP servers may a minions-spawned
+// copilot load." It is applied to EVERY copilot spawn path — agent dispatches
+// (engine), internal `llm.callLLM` calls (engine), and CC / doc-chat / the CC
+// worker pool (dashboard) — by setting `process.env.COPILOT_HOME` at the boot of
+// both processes, so every copilot CHILD inherits the filtered config. copilot
+// SPAWNS every server in its config and authenticates it (`--disable-mcp-server`
+// only hides tools), so any auth-requiring server pops a Microsoft window per
+// spawn — filtering the config is the only effective control. Idempotent: writes
+// only when the content changes (safe under concurrent callers). The operator's
+// real `~/.copilot` (interactive copilot) is never touched. Fail-open.
+function ensureAgentCopilotHome(minionsDir, engine) {
+  const home = resolveAgentCopilotHome(minionsDir);
+  try {
+    fs.mkdirSync(home, { recursive: true });
+    const disabled = new Set(resolveCopilotAgentDisabledMcpServers(null, engine));
+    let servers = {};
+    try {
+      const userCfgPath = path.join(os.homedir(), '.copilot', 'mcp-config.json');
+      const userCfg = JSON.parse(fs.readFileSync(userCfgPath, 'utf8').replace(/^/, ''));
+      for (const [name, def] of Object.entries(userCfg.mcpServers || {})) {
+        if (!disabled.has(name)) servers[name] = def;
+      }
+    } catch { servers = {}; /* no/unreadable user config → no MCPs */ }
+    const desired = JSON.stringify({ mcpServers: servers }, null, 2);
+    const cfgFile = path.join(home, 'mcp-config.json');
+    let current = null;
+    try { current = fs.readFileSync(cfgFile, 'utf8'); } catch {}
+    if (current !== desired) fs.writeFileSync(cfgFile, desired);
+  } catch { /* fail-open: leave whatever home/config exists */ }
+  return home;
+}
+
 // ── Spawn cwd vs worktree placement (W-mp73x32w000l143d) ──────────────────────
 // Work types that don't need a git worktree — they read repo state but don't
 // produce code changes. Centralized here so engine.js spawnAgent and any
@@ -8961,6 +8995,7 @@ module.exports = {
   assertWorktreeOutsideProject,
   resolveProjectRootDir,
   resolveAgentCopilotHome,
+  ensureAgentCopilotHome,
   resolveSpawnPaths,
   validateWorkItemWorkdir,
   applyWorkdir,

package/engine.js

@@ -1907,27 +1907,12 @@ async function recoverPartialWorktree(rootDir, worktreePath, branchName, gitOpts
 // real ~/.copilot is untouched. Best-effort/fail-open: any failure leaves the
 // inherited COPILOT_HOME so a hiccup never blocks a dispatch.
 function _applyAgentCopilotHome(childEnv) {
-  try {
-    const home = shared.resolveAgentCopilotHome(MINIONS_DIR);
-    fs.mkdirSync(home, { recursive: true });
-    const disabled = new Set(shared.resolveCopilotAgentDisabledMcpServers(null, getConfig()?.engine));
-    let servers = {};
-    try {
-      const userCfgPath = path.join(os.homedir(), '.copilot', 'mcp-config.json');
-      const userCfg = JSON.parse(fs.readFileSync(userCfgPath, 'utf8').replace(/^/, ''));
-      for (const [name, def] of Object.entries(userCfg.mcpServers || {})) {
-        if (!disabled.has(name)) servers[name] = def;
-      }
-    } catch { servers = {}; /* no/unreadable user config → agents get no MCPs */ }
-    // Write only when the content changes — keeps concurrent spawns from racing
-    // on the shared file (the engine-level list is identical across agents).
-    const desired = JSON.stringify({ mcpServers: servers }, null, 2);
-    const cfgFile = path.join(home, 'mcp-config.json');
-    let current = null;
-    try { current = fs.readFileSync(cfgFile, 'utf8'); } catch {}
-    if (current !== desired) fs.writeFileSync(cfgFile, desired);
-    childEnv.COPILOT_HOME = home;
-  } catch { /* leave inherited COPILOT_HOME untouched */ }
+  // Re-seed (picks up Settings changes to the disabled list) + stamp the env.
+  // process.env.COPILOT_HOME is also set at engine boot (see below) so the
+  // child would inherit it anyway; this is belt-and-suspenders + keeps the
+  // seed fresh per dispatch. See shared.ensureAgentCopilotHome.
+  try { childEnv.COPILOT_HOME = shared.ensureAgentCopilotHome(MINIONS_DIR, getConfig()?.engine); }
+  catch { /* leave inherited COPILOT_HOME untouched */ }
 }
 
 async function spawnAgent(dispatchItem, config) {
@@ -10273,6 +10258,14 @@ module.exports = {
 // ─── Entrypoint ─────────────────────────────────────────────────────────────
 
 if (require.main === module) {
+  // Every copilot this process spawns — agent dispatches AND internal
+  // `llm.callLLM` calls (consolidation, classification, meetings, …) — inherits
+  // this process's COPILOT_HOME, so point it at the seeded, MCP-filtered home.
+  // Without this, those `direct:true` copilot calls load the operator's full
+  // `~/.copilot` stack and pop a Microsoft auth window per call. The dashboard
+  // sets the same at its own boot for CC / doc-chat / the CC worker pool.
+  // See shared.ensureAgentCopilotHome. Fail-open.
+  try { process.env.COPILOT_HOME = shared.ensureAgentCopilotHome(MINIONS_DIR, getConfig()?.engine); } catch {}
   const { handleCommand } = require('./engine/cli');
   const [cmd, ...args] = process.argv.slice(2);
   handleCommand(cmd, args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.2240",
+  "version": "0.1.2241",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"